Death of tccutil.py in Sierra (getting Spectacle working)

[AVmcclint]

I've started rolling out Sierra to our Java developers in very small doses for testing and yesterday I was alerted that new installs of Spectacle wasn't working. I dug into it and discovered that the tccutil.py script that sets the Accessibility settings for the app no longer works in Sierra because SIP protections have been cranked up since El Capitan. Our devs are not admin users on their computers but they absolutely love Spectacle. The only way I'm seeing us continuing with Spectacle is if I manually go around to every user who installs Spectacle and configure the settings in Security & Privacy myself. Does anyone know of maybe another way around this? Is there an alternative to Spectacle that does NOT require changes to the Accessibility settings? OR is there some other way of modifying the settings in a similar manner to what tccutil.py did? Giving users admin rights or disabling SIP are not options I can entertain here.

[bentoms]

@AVmcclint I killed off some of the TCC workarounds in a version of ADPassMon I'm working on.

I'd urge you to log a bug with Apple & ask for the TCC.db to become manageable via a profile.

[bmagistro]

@AVmcclint Did you ever find a solution for this? We are looking at trying to do this and it seems our options are to say no or visit every workstation.

@bentoms Any suggestions who at Apple? I got bounced around a bit with a support call and got nowhere trying to request this.

[AVmcclint]

I submitted a bug report and gave my 2 cents at Apple.com/feedback I’ve given up on any way to automate this. Instead I’ve put Spectacle into my master image that I pre-approved so it applies to every computer imaged from that. If imaging truly is dead moving forward then I’ll have to manually approve Spectacle on every computer it’s installed on.

[jimmy-swings]

Anyone had any recent success? I to have raised a support ticket, now a feature request with Apple.

[bvrooman]

If you're running Mojave, you can now permit Accessibility access via a profile.

https://www.jamf.com/jamf-nation/articles/553/preparing-your-organization-for-user-data-protections-...